IPv6 Security

What's IPv6 (other than Internet Protocol version 6)?

It's the next step in the evolution of the Internet. The present internet (IPv4) was designed in the 70's, and is starting to have problems with its growth as well as some other issues.

IPv6 fixes the scaling problems as well as a bunch of other things, but adds a large amount of complexity and some overhead to the network.

In a nutshell, an IPv6 internet would be lots better than our present IPv4 Internet.

The bad news? It will be really hard to transition from IPv4 to IPv6 for our nework providers and network engineers. Would better technology work better for users when the operators don't understand it and the hardware is only partially implemented?

Add security to the mix and it's 10 (100?) times worse. The security people who understand IPv4 and are trying to keep up with the bad guys don't have the time to learn IPv6 at the level that they need to, and the hardware vendors don't have security devices that support IPv6 at the level of IPv4. IPv4 is also growing faster than our budgets to buy and support it -

IPv6 network gear is also (a lot) more expensive - how can we justify buying more expensive stuff when the features that add cost won't be turned on?

It's common knowledge in the network security business that the bad guys know IPv6 better than the good guys.

We know we need to transition our networks to IPv6 sometime. We just don't know when.